CVE-2026-86601

6.5 Moyenne

Publiée le 23/09/2026 à 13:17 · Modifiée le 23/09/2026 à 20:13 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The WP Recipe Maker WordPress plugin before 10.8.2 does not remove shortcodes from comment content before expanding it while building a page's structured metadata, allowing unauthenticated users to have arbitrary shortcodes executed server side and to read the content of unpublished recipes.

Traduire en français

Produits concernés

Unknown WP Recipe Maker

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	contact@wpscan.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-74

Références

https://wpscan.com/vulnerability/be6b1fb1-222d-4563-8a19-41bed1960001/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories